如何从另一台机器（centos 或 mac）从一台机器（centos）创建 ssh 到 docker 容器

Question

I want to create a docker container from one machine (suppose having centos) machine and then access that container from another machine(may be centos or mac). How can we do that? Is it possible with macvlan networking? If yes, what are steps? If not, what is the way?

Answer 1

Depends from what is your final goal. Following are some approaches (depending on what you want to achieve as final goal):

1. Manage container and execute bash in the container on a remote host:

   Easiest way is to use the environment variable DOCKER_HOST

    export DOCKER_HOST=ssh://vagrant@192.168.5.178 docker exec -ti centos_remote /bin/bash

   You can find more information in this answer https://stackoverflow.com/a/51897942/2816703

2. Use the container as a form of virtual machine on which user can ssh:

   First you will need a container that is running the sshd . You will expose the port 22 on another port on the host network. Finally you will use the ssh with -p to connect that port. Here is a working example:

    $ sudo docker run -d -P --name test_sshd rastasheep/ubuntu-sshd:14.04 $ sudo docker port test_sshd 22 0.0.0.0:49154 $ ssh root@localhost -p 49154 # The password is `root` root@test_sshd $

   or if you are on a remote machine, use the host IP address xxx.xxx.xxx.xxx, to connect to the container use:

    $ ssh root@xxx.xxx.xxx.xxx -p 49154 # The password is `root`

   Also you can pre-select a port (in this case port 22000) and test from the host.

    ~# docker run -d -p 22000:22 --name test_sshd rastasheep/ubuntu-sshd:14.04 ~# ssh root@<ipaddress> -p 22000

3. Setup a network layer (L2/L3) between the hosts:

   Using macvlan is one approach. Another approach is the ipvlan. In both cases, you are converting the host network adapter to a virtual router, after which you need to setup the routes. You can find detailed explanation on this link http://networkstatic.net/configuring-macvlan-ipvlan-linux-networking/